
In order to recover the Cisco ASA password, which operation mode should you enter?
A. configure
B. unprivileged
C. privileged
D. monitor
Answer: D
QUESTION NO: 7
Which three statements correctly describe protocol inspection on the Cisco ASA adaptive security
appliance? (Choose three.)
A. For the security appliance to inspect packets for signs of malicious application misuse, you
must enable advanced (application layer) protocol inspection.
B. if you want to enable inspection globally for a protocol that is not inspected by default or if you
want to globally disable inspection for a protocol, you can edit the default global policy.
C. The protocol inspection feature of the security appliance securely opens and closes negotiated
ports and IP addresses for legitimate client-server connections through the security appliance.
D. if inspection for a protocol is not enabled, traffic for that protocol may be blocked.
Answer: B,C,D
QUESTION NO: 8
Observe the following commands, which one verifies that NAT is working normally and displays
active NAT translations?
A. showip nat all
B. show running-configuration nat
C. showxlate
D. show nat translation
Answer: C
QUESTION NO: 9
Multimedia applications transmit requests on TCP, get responses on UDP or TCP, use dynamic
ports, and use the same port for source and destination, so they can pose challenges to a firewall.
Which three items are true about how the Cisco ASA adaptive security appliance handles
multimedia applications? (Choose three.)
Cisco 642-524: Practice Exam
5
http://certkill.com